[Ayesh]

All composer packages are namespaced, and warns if the command is being run as root.

It has its own potential security issues with post-downloadn scripts, but knowing the namespace helps a bit.